Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9qa0lfnRHt18P86Ad0hKmcZMsy0.roa
File: 9qa0lfnRHt18P86Ad0hKmcZMsy0.roa (raw, json)
Hash identifier: 9dLL99fGCR2G1ypZ7qPG0EGzaJcyayAFWXvkSMhnO0c=
Subject key identifier: F6:A6:B4:95:F9:D1:1E:DD:7C:3F:CE:80:77:48:4A:99:C6:4C:B3:2D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0183C2279237B2F3A7A9037D04DF48E46962
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9qa0lfnRHt18P86Ad0hKmcZMsy0.roa
Signing time: Mon 10 Oct 2022 13:48:36 +0000
ROA not before: Mon 10 Oct 2022 13:48:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.136.0/21 maxlen: 21
188.255.139.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
188.255.211.0/24 maxlen: 24
188.255.209.0/24 maxlen: 24
109.121.30.0/24 maxlen: 24
188.255.214.0/24 maxlen: 24
188.255.221.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.222.0/23 maxlen: 23
188.255.224.0/22 maxlen: 22
109.121.32.0/21 maxlen: 21
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.242.0/23 maxlen: 23
109.121.56.0/22 maxlen: 22
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.146.0/23 maxlen: 24
188.255.160.0/20 maxlen: 20
188.255.176.0/20 maxlen: 20
188.255.185.0/24 maxlen: 24
188.255.181.0/24 maxlen: 24
188.255.186.0/23 maxlen: 23
188.255.189.0/24 maxlen: 24
188.255.188.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.251.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
178.253.252.0/22 maxlen: 22
81.18.50.0/24 maxlen: 24
178.253.248.0/23 maxlen: 23
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.36.0/22 maxlen: 22
77.105.32.0/22 maxlen: 22
77.105.38.0/24 maxlen: 24
77.105.44.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.42.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.46.0/23 maxlen: 23
77.105.45.0/24 maxlen: 24
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/21 maxlen: 21
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.96.0/22 maxlen: 22
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/21 maxlen: 21
79.175.64.0/20 maxlen: 20
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:27:92:37:b2:f3:a7:a9:03:7d:04:df:48:e4:69:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 10 13:48:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6a6b495f9d11edd7c3fce8077484a99c64cb32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:45:30:5b:a6:4d:c7:64:94:18:42:8c:29:
0d:f6:cb:72:8f:72:2c:6d:18:f3:73:0f:29:d5:0a:
18:70:59:03:dd:c5:40:f7:b1:bf:b2:f9:d2:dd:34:
13:4b:af:f3:6e:f6:6a:9d:46:32:3f:e0:c7:70:6a:
00:e8:05:b8:2e:b7:a6:e4:51:8d:44:3c:d3:bf:79:
81:96:01:f4:71:b1:df:89:07:2e:ed:02:ae:da:cb:
22:89:11:e5:7d:8d:82:81:e6:ac:19:9f:07:f3:5c:
4d:71:c8:9e:95:35:dc:c4:31:7f:6d:e3:77:15:16:
a9:0c:20:32:a9:18:7b:bd:ff:77:e7:36:4b:d3:1b:
01:b0:eb:86:06:66:d4:08:1c:6b:a0:35:74:c7:34:
ed:15:d7:57:55:8c:40:38:72:ec:24:16:6b:2a:9a:
36:15:2b:a9:2a:2a:22:34:c4:98:ed:69:27:65:b0:
fa:94:fc:e0:41:7f:08:f6:3c:55:8a:af:92:76:47:
d8:b2:44:55:e9:f5:26:de:50:69:7d:c6:dc:84:2c:
f3:89:7a:16:79:14:ae:ed:0c:bf:53:b2:fd:04:85:
6d:7d:11:00:a9:ae:35:23:3c:37:9d:22:d9:2e:b7:
df:2e:e9:7c:e6:1c:c6:1a:10:ea:e2:d3:e3:25:29:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A6:B4:95:F9:D1:1E:DD:7C:3F:CE:80:77:48:4A:99:C6:4C:B3:2D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9qa0lfnRHt18P86Ad0hKmcZMsy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0-77.105.10.255
77.105.12.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.249.255
178.253.251.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.136.0-188.255.191.255
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.209.0/24
188.255.211.0/24
188.255.214.0/24
188.255.220.0-188.255.228.255
188.255.230.0-188.255.235.255
188.255.240.0/22
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.129.0/24
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
5c:de:bd:a4:af:d1:e5:7d:30:a9:8c:91:45:77:23:0a:a4:86:
d0:26:06:40:34:89:22:33:93:6d:ca:e5:f6:e0:d3:a9:9e:47:
6c:f1:3c:b9:51:bf:82:df:a8:b5:7b:ba:c8:49:7c:0c:8b:b7:
c3:a1:b2:2e:95:db:2c:0c:ef:25:9a:42:12:9b:66:54:b6:b8:
c6:fa:72:7f:f3:86:8c:3a:31:70:39:68:5c:63:c1:36:93:6f:
4d:f7:58:ac:4a:c5:ec:f8:dd:2b:d5:dd:32:8c:7d:eb:22:89:
5a:b5:eb:0f:79:e9:00:dc:5a:b3:6f:ec:93:5c:99:70:bf:3c:
6f:5b:b7:65:25:e8:48:f5:1c:36:70:1e:ff:d4:0b:dc:d3:07:
14:96:3c:62:14:dc:80:93:fa:78:b8:7a:db:8a:7a:f5:3f:91:
03:e7:41:5d:44:99:1d:4d:63:36:fc:62:1c:0e:78:32:57:8a:
83:5e:d7:cc:98:99:b0:0f:9e:97:7e:a7:fb:e9:3e:b8:8f:ac:
36:a5:84:91:00:50:5d:79:bb:25:67:b6:77:75:04:e3:ce:b2:
aa:da:e2:df:87:f3:0e:6a:dd:2c:17:0e:0c:9c:6a:50:0b:19:
80:c4:c2:21:8c:af:5d:2c:d1:dc:d6:fe:46:c5:05:1f:a5:e6:
0a:94:f4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org